# Finding Patterns - Logstash 5.5

**URL:** <https://discuss.elastic.co/t/finding-patterns-logstash-5-5/94394>\
**Category:** Logstash\
**Created:** [July 24, 2017, 9:32pm UTC](https://discuss.elastic.co/t/finding-patterns-logstash-5-5/94394 "2017-07-24T21:32:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jukeboxhero85](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jukeboxhero85/32/20391_2.png) [@jukeboxhero85](https://discuss.elastic.co/u/jukeboxhero85)\
**Post date:** [July 24, 2017, 9:32pm UTC](https://discuss.elastic.co/t/finding-patterns-logstash-5-5/94394/1 "2017-07-24T21:32:00Z")

</div>

Hi, I'm trying to send data from some logs I have of type FILE, this are created as a big string separated by "|" I checked another post with a similar issue but could not figure out what it's happening.

Test configuration:

```
input {
  file {
    path => "C:/myLogs/*"
  }
}

filter {
    mutate {
    split => {"message" => "|" }
    }
}

output { 
  stdout { codec => rubydebug }
}

```

The .FILE size is about 1 MB should not be a problem; sample of the data in the file:

20145555(2)-0|750243(1)100Nf0|750244(1)100Nf0|750242(1)100Nf0|501500(14)100Nf0|132(8)100Nf0|145(1)100Nf000Fd111Rx000|

Logstash will just hang, no error message or behavior at all. Can anyone give me a little bit of direction please?

Thanks

---

<div class="post-metadata">

**Author:** ![jukeboxhero85](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jukeboxhero85/32/20391_2.png) [@jukeboxhero85](https://discuss.elastic.co/u/jukeboxhero85)\
**Post date:** [July 25, 2017, 12:07am UTC](https://discuss.elastic.co/t/finding-patterns-logstash-5-5/94394/2 "2017-07-25T00:07:58Z")

</div>

I actually managed to make it work, there was a problem with the log file it seems but Logstash never gave me an error message, everything is good now. Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 22, 2017, 12:08am UTC](https://discuss.elastic.co/t/finding-patterns-logstash-5-5/94394/3 "2017-08-22T00:08:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.